Abstract 

In a case where the services are used jointly among 
plural users with the use of shared electronic keys, a method 
which invalidates only the electronic keys of some users 
is provided. 

Electronic key data stored in a user module 100 owned 
by the user includes two kinds of data: main ID data and 
sub id history data. A service providing device 400 holds 
two tables: a service allowance table and a service denial 
table, and upon receipt of the electronic Key data from the 
nsp.r module 100, it allows the use of the services (Step 
106} only when the main ID data of the electronic key is 
present in the service allowance table (Step 104) and when 
the sub ID data contained in the sub ID history data is absent 
in the service denial table (Step 105) . 
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